3a68a1622f5d94643ca17f81d4fe09fd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a68a1622f5d94643ca17f81d4fe09fd_JaffaCakes118
Size

11KB
MD5

3a68a1622f5d94643ca17f81d4fe09fd
SHA1

56c509830c5397c65a259d2dd40d9fa0d80679d6
SHA256

0ce6fbb29c58f119957c7de469642cb531ab42c39c15dac374982b8a46aca494
SHA512

ca3783589c2f902680969700f5ee9196a8ba2d317a38155ea1d3251422eb4f19a5c839c271156dc73636ca95cc35d0e395f17a8359d73bde00b54379d66a374f
SSDEEP

192:NLhXp7zVldfjlZnZoLGnGthOck1LGnKArkBML:NLpXldJoiGucnKzBML

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a68a1622f5d94643ca17f81d4fe09fd_JaffaCakes118

Files

3a68a1622f5d94643ca17f81d4fe09fd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7446a11b07c5615a1b694cc79f65edbf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
WriteFile
CreateFileA
GetTempPathA
HeapFree
GetProcAddress
HeapAlloc
GetProcessHeap

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ